Claims 



1 A system for providing controlled access to an object and other associated information a 

2 ^ file by a plurality of users comprising: 

3 a database fo storing an object and associated information, the object comprising 

4 distinguishable grou )S of data, each group of data having associated access criteria for access to 

5 the groups of data; 

6 a central pre cessing unit (CPU) for controlling the access to the database; 

7 a memory fo - storing software code for controlling the operation of the CPU; and 

8 access applic nation code stored in the memory and executable by the CPU, the application 

9 code being responsive to the access criteria associated with the groups of data contained within 

10 an object and to predetermined privileges for allowing controlled access to individual groups of 

1 1 data contained with in the object by an individual user according to the user's privileges. 

1 2. A s) stem according to Claim 1 , wherein access includes the ability of a user to 
2 



read the contents o 



the requested object. 
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3. A system according to Claim 2, wherein access includes the ability to modify the 
contents of the reqiuested object. 



4. A system according to Claim 3, wherein the ability to modify includes the abihty 
to delete information contained in the requested object. 



1 5. 

2 to add data to 



A system according to Claim 3, wherein the ability to modify includes the ability 
the requested object. 



system according to Claim 1 wherein the access is determined by a business 
relationship to pi oduce products and defined by the host according to the need of information in 
the product chain. 



method of controlling access to objects stored in electronic form, comprising: 
storing ah object, the object comprising distinguishable groups of data, each group of 
data having assc ciated access criteria for access to the groups of data; 

controU ng the access to the database using a central processing unit(CPU) 
according to ac cess criteria; 

storing s oftware code for controlling the operation of the CPU in memory; and 
allowing controlled access to individual groups of data contained within the object by an 
individual user iccording to the user's privileges in response to the access criteria associated 



with the groups 



of data contained within an object and to predetermined privileges. 



8. A method according to Claim 7 further comprising: 
receiving an object request by a requestor; 
verifyin ; the requestor's user privilege access criteria; and 
transmit ing information according to the requestor's user privilege access criteria. 
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9. A method according to Claim 7, wherein estabhshing an object includes loading 
information into the object intp separate groups having separate access privilege criteria. 

10. A method acdbrding to Claim 7, wherein establishing privilege access criteria 
includes identifying the separate groups of information to which the user may access. 

11. A method according to Claim 7, wherein verifying the requestor's user privilege 
access criteria includes expacting the requestor's user identification from the object request, 
verifying the requestor's i/ser identification and identifying the groups of data to which the 
requestor has access. 

12. A method/ according to Claim 7, wherein transmitting a redacted object includes 
sending an electronic object to the requestor that contains the groups of information to which the 
requestor has access to ^d that excludes groups of information to which the requestor does not 
have access. 

J2ff^ A computer program product for use with a computer system, a central processing 
unit and means coupled to the central processing unit for storing a database to automatically 
manage objects for vising and marking an object having varying formats without the use of any 
originating application of a file to view the object, comprising: 

computer readable code means for establishing an object in a storage location; 

computer readable code means for identifying a user to have access to the object; 

computer readable code means for establishing privilege access criteria that define the 
scope of access of the object for the user; 

computer readable code means for receiving an object request by a requestor; 

computer reachable code means for verifying the requestor's user privilege access criteria; 

and 

computer readable code means for transmitting a redacted document according to the 
requestor's user privilege access criteria. 

A computer program device, comprising: 
a computer p rogram storage device readable by a digital processing apparatus; 
a program st )red on the program storage device and including instructions executable by 
the digital processing apparatus for controlling the apparatus to perform a method of managing 
documents for view ng and marking an object having varying formats without the use of any 
originating applicat on of a file to view the object stored in the file, comprising: 
an object in a storage location; 
. user to have access to the object; 



user; 



establishing 
identifying £ 

estabhshing privilege access criteria that define the scope of access of the object for the 



receiving a c bject request by a requestor; 
verifying th( ; requestor's user privilege access criteria; and 

transmitting a redacted object according to the requestor's user privilege access criteria. 
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In aJcomputer server having a data base for storing data pertaining to product 
information, a metnod of securely transferring data between a source and an access destination 
comprising: / 

establishinjg an object in a storage location; 

identifyini; a user to have access to the object; 

establishii g privilege access criteria that define the scope of access of the object for the 



user; 



receiving a object request by a requestor; 

verifying the requestor's user privilege access criteria; and 

transmitting a redacted object according to the requestor's user privilege access criteria. 
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